CVE-2022-25180: Jenkins Pipeline: Groovy

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier includes password parameters from the original build in replayed builds, allowing attackers with Run/Replay permission to obtain the values of password parameters passed to previous builds of a Pipeline.

Affected products

• Jenkins Pipeline: Groovy: up to and including 2648.va9433432b33c

Published 2022-02-15. Last modified 2026-06-17.